Loading story…
Sophos X-Ops reported that a threat actor built and tested an AI-assisted post-exploitation framework designed to evade endpoint detection and response tools, using a mix of malicious files, Cobalt Strike profiles, Python shellcode-injection scripts, a Telegram Bot API command-and-control channel, and a Cloudflare Worker redirector. Investigators found a supporting Git repository that automated Active Directory discovery and maintained a malware-testing lab with multiple virtual machines to evaluate bypass techniques against Sophos, CrowdStrike, and Microsoft Defender environments; many scripts appeared partly AI-generated and included Russian-language elements.
The framework used a Python payload generator to create Rust- and Go-based payloads with encryption, evasion, and alternate execution methods, ultimately producing nearly 80 modules that tested more than 70 techniques. Sophos said the operators used tools including Cursor, Claude Opus 4.5, and Model Context Protocol to coordinate workflows, ingest public research, and map activity to MITRE ATT&CK, but found no clear evidence that AI independently invented new malware capabilities; the company also linked the development activity to known ransomware deployment and data-theft operations and urged organizations to maintain layered defenses including patching, MFA, passkeys, and strong EDR coverage.
Get the actors, campaigns, and ATT&CK mapping behind it.
1 event from the most recent confirmed update back to the earliest known activity.
Sophos X-Ops reported on a threat actor that used AI-assisted tooling, including Cursor, Claude Opus 4.5, and Model Context Protocol, to develop and test EDR evasion techniques within a post-exploitation framework. The investigation linked the development activity to known ransomware deployment and data theft operations and documented supporting infrastructure such as Telegram Bot API C2, a Cloudflare Worker redirector, and malware-testing lab environments.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
7 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcecybersecuritynews.com
Open sourcedarkreading.com
Open sourcesophos.com
Open sourcebleepingcomputer.com
Open sourcehelpnetsecurity.com
Open sourcesophos.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Underground operators are increasingly packaging generative AI into **criminal AI-as-a-service** offerings that support phishing, fraud, impersonation, malware modification, translation, and post-breach data analysis. Reporting on the market describes branded tools such as **FraudGPT**, **GhostGPT**, and **WormGPT**, but says many are little more than wrappers around legitimate models, stolen accounts, or hijacked API keys rather than fully autonomous hacking platforms. Researchers also highlighted a parallel market for deepfake-enabled abuse, including voice cloning, face swaps, fake selfies, and virtual camera injection used for KYC bypass, synthetic identity fraud, and onboarding scams. Sophos separately identified a malware development lab using AI tools including **Cursor** and **Claude Opus** to speed ransomware-related coding, payload refinement, and evasion testing. The framework reportedly generated Python-driven Rust and Go malware modules, customized **Cobalt Strike** profiles, Telegram-based command channels, Cloudflare Worker intermediaries for command-and-control traffic, code-injection scripts targeting legitimate Windows applications, and AI-assisted Active Directory reconnaissance. Researchers said the operation tested nearly 80 modules against more than 70 evasion methods across Sophos, CrowdStrike, and Microsoft defenses, reinforcing that the immediate risk is not autonomous AI malware but faster, cheaper, and more scalable attacker workflows.
Jun 29, 2026
Threat actors increasingly abused *legitimate AI tools* and automation to accelerate intrusions, with CrowdStrike reporting an **89% YoY increase in AI-enabled adversary activity** and an average eCrime breakout time dropping to **29 minutes** (fastest observed **27 seconds**). CrowdStrike also described attackers poisoning or hijacking local AI tooling via **malicious JavaScript embedded in npm packages** targeting tools such as *Claude* and *Gemini* to steal credentials and crypto assets, and highlighted a **CHATTY SPIDER** intrusion that began with voice phishing and remote access via **Microsoft Quick Assist**, followed by attempted exfiltration using **WinSCP** and a fallback to **Google Drive** when blocked. Separate reporting detailed additional active campaigns and exploitation trends consistent with faster initial access and persistence: **UAC-0050 (DaVinci Group / “Mercenary Akula”)** used spear-phishing with spoofed Ukrainian judicial themes and multi-layer archives (ZIP→RAR→passworded 7z) to deliver an `*.pdf.exe` dropper that installed **Remote Manipulator System (RMS)** for remote control and file transfer against a European financial institution. **UnsolicitedBooker** shifted targeting to telecoms in Kyrgyzstan and Tajikistan, using phishing documents that prompt “Enable Content” to run macros that drop loaders (e.g., **LuciLoad**, **MarsSnakeLoader**) and deploy **LuciDoor** and **MarsSnake** backdoors. Vulnerability intelligence for January 2026 also warned of **active exploitation** including **APT28** use of a Microsoft Office zero-day (**CVE-2026-21509**) via weaponized RTFs to deliver implants (e.g., **Covenant**), alongside multiple critical authentication-bypass and RCE issues affecting enterprise platforms—reinforcing that adversaries are combining rapid social engineering, supply-chain style delivery, and exploited vulnerabilities to compress dwell time and speed lateral movement.
Jun 29, 2026
Gambit Security reported that a suspected affiliate of **The Gentlemen** ransomware-as-a-service operation used Anthropic’s **Claude Code** during live intrusions at multiple organizations, showing how generative AI is being embedded directly into ransomware activity. The actor reportedly used AI to breach internet-exposed VPN appliances, conduct reconnaissance, enumerate internal networks, identify domain controllers and backup systems, and prioritize high-value business data for theft. In one highlighted technique, the operator carried out an AI-assisted LDAP pass-back attack against **FortiGate** authentication to capture a service account password in cleartext, then created a hidden VPN account to maintain persistence. The intrusions also involved staging and exfiltrating **SQL Server** backups, modifying firewall configurations, and using AI-generated scripts to accelerate operations. Gambit linked the activity to The Gentlemen with medium confidence based on leak-site overlap, shared infrastructure, and targeting patterns focused on backup systems. The report placed the ransomware case alongside other AI-enabled criminal operations, including the **Zerofot** credential-harvesting campaign built with OpenAI Codex and Claude Code and the **RAGE** framework backed by DeepSeek, underscoring a broader shift toward AI-assisted credential theft, reconnaissance, and malware deployment. Gambit also noted that AI use introduced operational errors, including a mistaken full VDOM restore that knocked a compromised firewall offline at an Australian energy utility.
Aug 20, 2026